Privacy Policy — b499 Online Casino & Betting

Introduction

b499 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting services. This Privacy Policy sets out, in clear and accessible terms, the types of personal information b499 collects, the purposes for which that information is processed, the circumstances under which it may be shared with third parties, the security measures in place to protect it, and the rights available to you as a data subject.

b499 operates as an online gaming platform serving players based in Bangladesh. All personal data collected and processed by b499 is handled with care, proportionality, and in accordance with the principles of data minimisation, purpose limitation, accuracy, integrity, and confidentiality that underpin responsible data governance.

This policy applies to all personal data collected through the b499 website at b499.io, any associated mobile-optimised interfaces, and all communications between b499 and its registered players — including email correspondence, support chat logs, and marketing communications where the player has opted in to receive them.

Data We Collect

b499 collects personal data that is necessary and proportionate to the purposes of operating a safe, compliant, and high-quality online gaming platform. The categories of personal data we collect are as follows:

Identity & Contact Information

• Full legal name (as it appears on your National Identity Card or passport)
• Date of birth
• Residential address in Bangladesh (including district and division)
• Mobile phone number (registered in Bangladesh)
• Email address

Account & Authentication Data

• b499 username
• Encrypted account password (b499 never stores passwords in plain text)
• Account creation date and time
• Login history, including IP address, device type, and session timestamps

Financial & Transaction Data

• Deposit and withdrawal transaction records (amount, date, time, payment method)
• Mobile payment account identifiers associated with bKash, Nagad, Rocket, or Upay transactions
• Account balance history
• Bonus and promotional credit records

Gaming Activity Data

• Game session logs (games played, wager amounts, outcomes, session duration)
• Sports betting selections and market data
• Responsible gaming tool usage (e.g., deposit limits set, cooling-off periods activated)

Identity Verification Data

• Copies of government-issued identity documents submitted for KYC (Know Your Customer) verification — such as National Identity Card (NID), passport, or driving licence
• Selfie or facial image submitted alongside an identity document where required for enhanced verification
• Source-of-funds documentation submitted in connection with withdrawal requests, where applicable

Technical & Device Data

• IP address at time of registration and subsequent logins
• Device type, operating system, and browser information
• Cookie identifiers and similar tracking data (see Section 6)
• Geolocation data (country and approximate region, not precise GPS location)

Communications Data

• Content of emails, live chat messages, or support ticket exchanges between you and b499 customer support
• Records of marketing emails sent to you (and your opt-in / opt-out status)

How We Collect Your Data

b499 collects personal data through the following channels and mechanisms:

Directly From You

The majority of the personal data b499 holds is provided directly by you during the account registration process, during identity verification, through your use of the platform (deposits, gameplay, withdrawals), and through any communications you initiate with b499 customer support.

Automatically During Platform Use

When you access and use the b499 platform, certain technical and behavioural data is collected automatically by our systems. This includes login event logs, session duration data, device and browser fingerprint data, and IP address records. This automated collection is necessary for platform security, fraud detection, and service delivery purposes.

From Payment Providers

When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, b499 receives transaction confirmation data from the relevant payment provider. This data is limited to the information necessary to match and reconcile the transaction against your b499 account — typically a transaction reference, amount, and masked payment account identifier. b499 does not have access to your full mobile banking account credentials or PIN.

From Identity Verification Providers

Where b499 uses a third-party KYC (Know Your Customer) service provider to verify player identity documents, b499 may receive a verification result and risk score from that provider in addition to the document data you submitted. Such providers are subject to strict data-processing agreements with b499.

Cookies & Tracking Technologies

b499 uses cookies and similar technologies to collect certain technical data automatically when you visit b499.io. For full details of b499's cookie practices, see Section 6 (Cookies & Tracking) of this policy.

How We Use Your Data

b499 processes personal data only for specified, explicit, and legitimate purposes. The table below sets out the primary purposes for which b499 uses your personal data, together with the lawful basis for each processing activity.

b499 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for processing.

Sharing Your Data

b499 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only where strictly necessary for the operation of the b499 platform or where required by law, under the following circumstances:

Payment Service Providers

To process deposits and withdrawals, b499 shares the minimum necessary transaction data with the relevant mobile payment provider — bKash, Nagad, Rocket, or Upay. Each payment partner operates under its own privacy policy and data-processing terms. b499 does not share your full identity documents or gaming history with payment providers.

Identity Verification & KYC Providers

Where third-party KYC verification services are used, identity document data submitted by the player is shared with the relevant provider for the sole purpose of completing the verification check. KYC providers are contractually bound to process this data only for that specified purpose and to maintain appropriate security standards.

Game Content Providers

Game studios and live casino operators — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive a player session token and wagering data necessary to deliver the game experience. These providers do not receive your full identity or financial profile.

Legal and Regulatory Authorities

b499 will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, a court order, or a lawful regulatory request. b499 will notify the relevant player of any such disclosure where it is legally permissible to do so.

Fraud Prevention and Security Services

b499 may share limited technical and transactional data with fraud prevention services and security intelligence platforms for the purpose of detecting and preventing fraudulent activity, money laundering, and other prohibited conduct on the platform.

Cookies & Tracking Technologies

b499 uses cookies and similar tracking technologies on the b499.io website to enhance platform performance, maintain session security, and understand how players interact with our content. The types of cookies b499 uses are as follows:

Strictly Necessary Cookies

These cookies are essential for the b499 platform to function. They enable core features such as account login session management, security token validation, and shopping-cart-equivalent functionality for in-progress bet slips. The platform cannot function correctly without these cookies. No consent is required for strictly necessary cookies.

Performance & Analytics Cookies

These cookies collect anonymised or pseudonymised data about how players use the b499 platform — including which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used solely to improve platform performance and user experience. These cookies do not identify individual players by name.

Functional Cookies

Functional cookies enable the platform to remember your preferences — such as your preferred language setting or your notification preferences — so that you do not need to re-enter them on each visit. Disabling these cookies may affect the quality of your platform experience.

Managing Cookies

Most modern web browsers allow you to control the cookies that are stored on your device through the browser's settings menu. You may choose to block or delete cookies at any time; however, please be aware that blocking strictly necessary cookies will impair your ability to log in to and use the b499 platform. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

Data Security

b499 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the b499 platform is encrypted using industry-standard SSL/TLS protocols. You can verify this by checking for the padlock icon in your browser's address bar when visiting b499.io.
• Password hashing: Account passwords are never stored in plain text. b499 uses strong cryptographic hashing algorithms to store password data securely.
• Access controls: Access to personal data within b499's internal systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement are permitted to access player data.
• Fraud detection systems: b499 operates automated fraud detection and anomaly-monitoring systems that flag suspicious login attempts, unusual transaction patterns, and other indicators of potential account compromise.
• Regular security reviews: b499 conducts periodic internal security reviews and works with external security specialists to identify and remediate vulnerabilities in the platform.

While b499 takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security against all conceivable threats. Players are encouraged to use strong, unique passwords for their b499 account and to contact support immediately at [email protected] if they suspect any unauthorised access.

Data Retention

b499 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in any event for no longer than is required by applicable legal and regulatory obligations. The general retention principles b499 applies are as follows:

• Active account data: Personal data associated with an active b499 player account is retained for the duration of the account relationship.
• Closed account data: Following the closure of a player account — whether at the player's request or by b499 — core identity, financial transaction, and KYC documentation records are retained for a minimum of five (5) years from the date of account closure, in accordance with anti-money laundering and record-keeping obligations.
• Support communications: Customer support ticket records and associated correspondence are retained for a minimum of two (2) years from the date of the most recent interaction.
• Marketing preferences: Records of marketing opt-in or opt-out instructions are retained indefinitely to ensure that b499 can demonstrate compliance with consent-based marketing obligations.
• Technical logs: Server access logs and fraud-detection event logs are retained for a maximum of twelve (12) months, after which they are automatically purged or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be linked to an identifiable individual.

Your Rights

As a b499 player and data subject, you hold the following rights in respect of your personal data. b499 is committed to honouring these rights promptly and transparently:

• Right of access: You have the right to request a copy of the personal data b499 holds about you, together with information about the purposes for which it is processed and the categories of recipients with whom it has been shared.
• Right to rectification: If you believe that any personal data b499 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you have the right to request that b499 delete your personal data. This right applies where, for example, the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis for processing exists. Please note that this right is subject to overriding legal and regulatory retention obligations.
• Right to restrict processing: You have the right to request that b499 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is resolved.
• Right to data portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on b499's legitimate interests. You also have an unconditional right to object to the use of your personal data for direct marketing purposes at any time.
• Right to withdraw consent: Where b499 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

To exercise any of the rights listed above, please contact b499's data support team at [email protected]. b499 will respond to all valid data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, b499 may extend this period by a further two months, with prior notification provided to the requesting player.

Protection of Minors

b499 operates a strict 21+ age policy. The b499 platform is not directed at, and must not be used by, any individual under the age of 21. b499 does not knowingly collect or process the personal data of individuals under 21 years of age.

Where b499 becomes aware that personal data has been collected from an individual who is under 21 years of age, b499 will take immediate steps to close the relevant account, delete or quarantine the associated personal data in accordance with applicable obligations, and report the matter to the relevant parties where required by law.

If you are a parent or guardian and believe that a minor in your care has registered with or used the b499 platform, please contact b499 immediately at [email protected]. b499 takes all such reports seriously and will investigate and act promptly.

Third-Party Services

The b499 platform integrates with a number of third-party service providers whose technologies and services are necessary to deliver a complete gaming experience. These include game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), mobile payment processors (bKash, Nagad, Rocket, Upay), and technical infrastructure providers.

Each of these third-party providers operates under its own privacy policy and data governance framework. b499 enters into data-processing agreements with all third-party providers who handle personal data on b499's behalf, requiring them to implement appropriate security measures and to process data only in accordance with b499's documented instructions.

b499 is not responsible for the privacy practices of third-party websites that may be linked to from b499.io. Players should review the privacy policies of any third-party site they visit independently of b499.

Changes to This Privacy Policy

b499 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the b499 platform. Where changes are material, b499 will notify registered players by email to the address associated with their account prior to the changes taking effect.

The effective date shown at the top of this policy reflects the date of the most recent revision. Players are encouraged to review this policy periodically to stay informed about how b499 protects their personal data. Continued use of the b499 platform following publication of a revised Privacy Policy constitutes acceptance of the updated terms.

For any questions, concerns, or requests relating to this Privacy Policy or to b499's data processing practices more generally, please contact the b499 support team at [email protected]. Our support team is available 24 hours a day, seven days a week, including all Bangladeshi public holidays.